The (1) domainpirqtoemuirq and (2) physdevunmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.
{ "urgency": "not yet assigned" }